Reference no: EM13761806
A four-paragraph executive summary written to executive management providing a summary of findings, risk impact to the IT asset and organization, and recommendations for next steps.
1. What are the differences between ZeNmap GUI (Nmap) and Nessus?
2. Which scanning application is better for performing a network discovery reconnaissance probing of an IP network infrastructure?
3. Which scanning application is better for performing a software vulnerability assessment with suggested remediation steps?
4. How many total scripts (i.e., test scans) does the Intense Scan using ZenMap GUI perform?
5. From the ZenMap GUI pdf report page 6, what ports and services are enabled on the Cisco Security Appliance device?
6. What is the source IP address of the Cisco Security Appliance device (refer to page 6 of the pdf report)?
7. How many IP hosts were identified in the Nessus® vulnerability scan? List them.
8. While Nessus provides suggestions for remediation steps, what else does Nessus provide that can help you assess the risk impact of the identified software vulnerability?
9. Are open ports necessarily a risk? Why or why not?
10. When you identify a known software vulnerability, where can you go to assess the risk impact of the software vulnerability?
11. If Nessus provides a pointer in the vulnerability assessment scan report to look up CVE-2009-3555 when using the CVE search listing, specify what this CVE is, what the potential exploits are, and assess the severity of the vulnerability.
12. Explain how the CVE search listing can be a tool for security practitioners and a tool for hackers.
13. What must an IT organization do to ensure that software updates and security patches are implemented timely?
14. What would you define in a vulnerability management policy for an organization?
15. Which tool should be used first if performing an ethical hacking penetration test and why?
|
How have the new rules in the sarbanes-oxley act
: How have the new rules in the Sarbanes-Oxley Act of 2002 affected the way accounting departments and companies operate?What are some positive outcomes from these changes?
|
|
Economic values are generally stated values
: Economic Values are generally stated values that do not refer to your mission or the way your firm operates. For example, "we wish to minimize the risk of loss" could be an economic value. Economic values directly affect the chosen mission and the wa..
|
|
Compute the roi for first year of email migration project
: Compute the minimum number of users that would be required to achieve a breakeven point. Compute the ROI for the first year of the email migration project, assuming the organization had 1,500 users
|
|
Normative values are generically stated values
: Normative Values are generically stated values that indirectly affect the mission or the way your firm operates. For example "we wish to help our employees lead socially balanced lives" could be an normative value for some firms (but it could could n..
|
|
Executive management providing
: A four-paragraph executive summary written to executive management providing a summary of findings, risk impact to the IT asset and organization, and recommendations for next steps.
|
|
What is the moral that you would give to the shadow
: What is the moral that you would give to "the Shadow"? Why does Dostoyevski refrain from entirely endorsing the vision of a heavenly Christmas?
|
|
Explain each individual crime separately
: • What white-collar crimes, if any, did Victor and John commit? Explain each individual's crime separately. • What ethical leadership and management violation has Victor committed? Explain.
|
|
Describe the concept of hrd change in an organization
: Describe the concept of HRD change in an organization using the Sociotechnical systems theory. Rationalize suitable interventions to address emotions of change. Please provide a complete page for information with citations and references
|
|
Discuss some of the emerging trends in information
: Discuss some of the emerging trends in information(e.g. computer hardware, software and data analysis
|